I encountered a problem where multiple services had duplicate brain splits. There were two replication protocols that overlapped with each other. How can I delete the incorrect replication of the database generation ID? I don't want to do "reinitialize" as it would result in data loss.
env ``` ubuntu16.04 CA freeipa4.3 fs-hiido-kerberos-21-117-149.hiido.host.yydevops.com freeipa4.8 fs-hiido-kerveros-test08.hiido.host.yydevops.com ```
ssh fs-hiido-kerberos-21-117-149.hiido.host.yydevops.com ```
root@fs-hiido-kerberos-21-117-149:/var/log/dirsrv/slapd-YYDEVOPS-COM# ldapsearch -LLL -x -H ldap://localhost:389 -D "cn=Directory Manager" -w xx -b "cn=replica,cn=dc\3Dyydevops\2Cdc\3Dcom,cn=mapping tree,cn=config" "(objectClass=nsds5ReplicationAgreement)" cn nsDS5ReplicaHost nsds5replicaLastUpdateStatus dn: cn=fs-hiido-kerberos-21-117-149.hiido.host.yydevops.com-to-fs-hiido-kerver os-test08.hiido.host.yydevops.com,cn=replica,cn=dc\3Dyydevops\2Cdc\3Dcom,cn=m apping tree,cn=config cn: fs-hiido-kerberos-21-117-149.hiido.host.yydevops.com-to-fs-hiido-kerveros- test08.hiido.host.yydevops.com nsDS5ReplicaHost: fs-hiido-kerveros-test08.hiido.host.yydevops.com nsds5replicaLastUpdateStatus: 402 Replication error acquiring replica: unknown error - Replica has different database generation ID, remote replica may nee d to be initialized
dn: cn=meTofs-hiido-ipa-65-155.hiido.host.yydevops.com,cn=replica,cn=dc\3Dyyde vops\2Cdc\3Dcom,cn=mapping tree,cn=config cn: meTofs-hiido-ipa-65-155.hiido.host.yydevops.com nsDS5ReplicaHost: fs-hiido-ipa-65-155.hiido.host.yydevops.com nsds5replicaLastUpdateStatus: 0 Replica acquired successfully: Incremental upd ate succeeded
dn: cn=meTofs-hiido-kerberos-ca-02.hiido.host.yydevops.com,cn=replica,cn=dc\3D yydevops\2Cdc\3Dcom,cn=mapping tree,cn=config cn: meTofs-hiido-kerberos-ca-02.hiido.host.yydevops.com nsDS5ReplicaHost: fs-hiido-kerberos-ca-02.hiido.host.yydevops.com nsds5replicaLastUpdateStatus: 0 Replica acquired successfully: Incremental upd ate succeeded
dn: cn=meToipa-65-189.hiido.host.yydevops.com,cn=replica,cn=dc\3Dyydevops\2Cdc \3Dcom,cn=mapping tree,cn=config cn: meToipa-65-189.hiido.host.yydevops.com nsDS5ReplicaHost: ipa-65-189.hiido.host.yydevops.com nsds5replicaLastUpdateStatus: 0 Replica acquired successfully: Incremental upd ate succeeded
root@fs-hiido-kerberos-21-117-149:/var/log/dirsrv/slapd-YYDEVOPS-COM# ```
ssh fs-hiido-kerveros-test08.hiido.host.yydevops.com ``` error log [28/Jan/2026:18:22:13.802652193 +0800] - WARN - NSMMReplicationPlugin - repl5_inc_run - agmt="cn=fs-hiido-kerveros-test08.hiido.host.yydevops.com-to-fs-hiido-kerberos-21-117-149.hiido.host.yydevops.com" (fs-hiido-kerberos-21-117-149:389): The remote replica has a different database generation ID than the local database. You may have to reinitialize the remote replica, or the local replica. [28/Jan/2026:18:22:14.825827647 +0800] - WARN - NSMMReplicationPlugin - repl5_inc_run - agmt="cn=fs-hiido-kerveros-test08.hiido.host.yydevops.com-to-fs-hiido-ipa-65-155.hiido.host.yydevops.com" (fs-hiido-ipa-65-155:389): The remote replica has a different database generation ID than the local database. You may have to reinitialize the remote replica, or the local replica.
root@fs-hiido-kerveros-test08:~# cat ref_149.ldif dn: cn=fs-hiido-kerveros-test08.hiido.host.yydevops.com-to-fs-hiido-kerberos-21-117-149.hiido.host.yydevops.com,cn=replica,cn=dc\3Dyydevops\2Cdc\3Dcom,cn=mapping tree,cn=config changetype: modify add: nsds5BeginReplicaRefresh nsds5BeginReplicaRefresh: start ldapmodify -H ldap://localhost:389 -Y GSSAPI -f 149_reinit.ldif
root@fs-hiido-kerveros-test08:/var/log/dirsrv/slapd-YYDEVOPS-COM# ldapsearch -LLL -x -H ldap://localhost:389 -D "cn=Directory Manager" -w ipaadmin4yycluster -b "cn=replica,cn=dc\3Dyydevops\2Cdc\3Dcom,cn=mapping tree,cn=config" "(objectClass=nsds5ReplicationAgreement)" cn nsDS5ReplicaHost nsds5replicaLastUpdateStatus dn: cn=fs-hiido-kerveros-test08.hiido.host.yydevops.com-to-fs-hiido-ipa-65-155 .hiido.host.yydevops.com,cn=replica,cn=dc\3Dyydevops\2Cdc\3Dcom,cn=mapping tr ee,cn=config cn: fs-hiido-kerveros-test08.hiido.host.yydevops.com-to-fs-hiido-ipa-65-155.hi ido.host.yydevops.com nsDS5ReplicaHost: fs-hiido-ipa-65-155.hiido.host.yydevops.com nsds5replicaLastUpdateStatus: Error (0) Replica acquired successfully: Increme ntal update succeeded
dn: cn=fs-hiido-kerveros-test08.hiido.host.yydevops.com-to-fs-hiido-kerberos-2 1-117-149.hiido.host.yydevops.com,cn=replica,cn=dc\3Dyydevops\2Cdc\3Dcom,cn=m apping tree,cn=config cn: fs-hiido-kerveros-test08.hiido.host.yydevops.com-to-fs-hiido-kerberos-21-1 17-149.hiido.host.yydevops.com nsDS5ReplicaHost: fs-hiido-kerberos-21-117-149.hiido.host.yydevops.com nsds5replicaLastUpdateStatus: Error (0) Replica acquired successfully: Increme ntal update succeeded
``` ssh fs-hiido-kerberos-21-117-149.hiido.host.yydevops.com ``` root@fs-hiido-kerberos-21-117-149:/var/log/dirsrv/slapd-YYDEVOPS-COM# ldapsearch -LLL -x -H ldap://localhost:389 -D "cn=Directory Manager" -w ipaadmin4yycluster -b "cn=replica,cn=dc\3Dyydevops\2Cdc\3Dcom,cn=mapping tree,cn=config" "(objectClass=nsds5ReplicationAgreement)" cn nsDS5ReplicaHost nsds5replicaLastUpdateStatus dn: cn=fs-hiido-kerberos-21-117-149.hiido.host.yydevops.com-to-fs-hiido-kerver os-test08.hiido.host.yydevops.com,cn=replica,cn=dc\3Dyydevops\2Cdc\3Dcom,cn=m apping tree,cn=config cn: fs-hiido-kerberos-21-117-149.hiido.host.yydevops.com-to-fs-hiido-kerveros- test08.hiido.host.yydevops.com nsDS5ReplicaHost: fs-hiido-kerveros-test08.hiido.host.yydevops.com nsds5replicaLastUpdateStatus: 0 Replica acquired successfully: Incremental upd ate succeeded
dn: cn=meTofs-hiido-ipa-65-155.hiido.host.yydevops.com,cn=replica,cn=dc\3Dyyde vops\2Cdc\3Dcom,cn=mapping tree,cn=config cn: meTofs-hiido-ipa-65-155.hiido.host.yydevops.com nsDS5ReplicaHost: fs-hiido-ipa-65-155.hiido.host.yydevops.com nsds5replicaLastUpdateStatus: 0 Replica acquired successfully: Incremental upd ate succeeded
dn: cn=meTofs-hiido-kerberos-ca-02.hiido.host.yydevops.com,cn=replica,cn=dc\3D yydevops\2Cdc\3Dcom,cn=mapping tree,cn=config cn: meTofs-hiido-kerberos-ca-02.hiido.host.yydevops.com nsDS5ReplicaHost: fs-hiido-kerberos-ca-02.hiido.host.yydevops.com nsds5replicaLastUpdateStatus: 1 Can't acquire busy replica
dn: cn=meToipa-65-189.hiido.host.yydevops.com,cn=replica,cn=dc\3Dyydevops\2Cdc \3Dcom,cn=mapping tree,cn=config cn: meToipa-65-189.hiido.host.yydevops.com nsDS5ReplicaHost: ipa-65-189.hiido.host.yydevops.com nsds5replicaLastUpdateStatus: 402 Replication error acquiring replica: unknown error - Replica has different database generation ID, remote replica may nee d to be initialized
dn: cn=meToipa-65-189.hiido.host.yydevops.com... changetype: modify add: nsds5BeginReplicaRefresh nsds5BeginReplicaRefresh: start ldapmodify -H ldap://localhost:389 -Y GSSAPI -f 189_reinit.ldif root@fs-hiido-kerberos-21-117-149:~# ldapsearch -LLL -x -H ldap://localhost:389 -D "cn=Directory Manager" -w ipaadmin4yycluster -b "cn=replica,cn=dc\3Dyydevops\2Cdc\3Dcom,cn=mapping tree,cn=config" "(objectClass=nsds5ReplicationAgreement)" cn nsDS5ReplicaHost nsds5replicaLastUpdateStatus dn: cn=fs-hiido-kerberos-21-117-149.hiido.host.yydevops.com-to-fs-hiido-kerver os-test08.hiido.host.yydevops.com,cn=replica,cn=dc\3Dyydevops\2Cdc\3Dcom,cn=m apping tree,cn=config cn: fs-hiido-kerberos-21-117-149.hiido.host.yydevops.com-to-fs-hiido-kerveros- test08.hiido.host.yydevops.com nsDS5ReplicaHost: fs-hiido-kerveros-test08.hiido.host.yydevops.com nsds5replicaLastUpdateStatus: 402 Replication error acquiring replica: unknown error - Replica has different database generation ID, remote replica may nee d to be initialized
dn: cn=meTofs-hiido-ipa-65-155.hiido.host.yydevops.com,cn=replica,cn=dc\3Dyyde vops\2Cdc\3Dcom,cn=mapping tree,cn=config cn: meTofs-hiido-ipa-65-155.hiido.host.yydevops.com nsDS5ReplicaHost: fs-hiido-ipa-65-155.hiido.host.yydevops.com nsds5replicaLastUpdateStatus: 0 Replica acquired successfully: Incremental upd ate succeeded
dn: cn=meTofs-hiido-kerberos-ca-02.hiido.host.yydevops.com,cn=replica,cn=dc\3D yydevops\2Cdc\3Dcom,cn=mapping tree,cn=config cn: meTofs-hiido-kerberos-ca-02.hiido.host.yydevops.com nsDS5ReplicaHost: fs-hiido-kerberos-ca-02.hiido.host.yydevops.com nsds5replicaLastUpdateStatus: 0 Replica acquired successfully: Incremental upd ate succeeded
dn: cn=meToipa-65-189.hiido.host.yydevops.com,cn=replica,cn=dc\3Dyydevops\2Cdc \3Dcom,cn=mapping tree,cn=config cn: meToipa-65-189.hiido.host.yydevops.com nsDS5ReplicaHost: ipa-65-189.hiido.host.yydevops.com nsds5replicaLastUpdateStatus: 0 Replica acquired successfully: Incremental upd ate succeeded ```
freeipa-users@lists.fedorahosted.org
-
liang fei